Skip to content
feed: live
>_0dayNews
CVE Record
[ HIGH ]CVE-2018-0167

Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code.

cat cve-2018-0167.json
Vendor
Cisco
Product
IOS, XR, and XE Software
CVSS
8.8
EPSS (exploit probability)
3.4%
Status
kev
CISA patch-by (BOD 22-01)
Published
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-0167

There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code.

Added to CISA’s Known Exploited Vulnerabilities catalog on 2022-03-03. Required action per CISA: Apply updates per vendor instructions. Due date: 2022-03-17.

This is an auto-synced KEV catalog record pending a full 0dayNews write-up — see CISA’s KEV catalog and the NVD record linked above for primary sources.